Behavioral task
behavioral1
Sample
349d7550b23a5c3051faa6981cbead3f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
349d7550b23a5c3051faa6981cbead3f_JaffaCakes118
-
Size
541KB
-
MD5
349d7550b23a5c3051faa6981cbead3f
-
SHA1
3f9c5bcad2f590360be7896ba0041e47b4557f6b
-
SHA256
ca689501b79de8430f0900c86e9a6b5c93b2d7cc68bc0b8921bb6ebb005f6893
-
SHA512
0371c22293785d230748d59b327e9e155d89255b6b2b85f9840279fb7c75f6ef12809d6d816786bbfe5946d0ce69ec581681a9fec4a2d141db1d72fc84b131b4
-
SSDEEP
12288:syh6wa8oBGf6J49nHwaLHjYWvluPL7R98NNNae8x3/:syh6x1ci4O4HUAQPH8Nae8
Malware Config
Extracted
vidar
37.1
517
http://tracker99.com/
-
profile_id
517
Signatures
Files
-
349d7550b23a5c3051faa6981cbead3f_JaffaCakes118.exe windows:5 windows x86 arch:x86
f54cc0304d2cd0172929148ae0ee0bf6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileA
MultiByteToWideChar
ReadFile
GetFileSize
GetVersionExA
LocalAlloc
GetFileSizeEx
CopyFileA
lstrcatA
GetCurrentDirectoryA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetProcAddress
LoadLibraryA
FileTimeToSystemTime
FreeLibrary
GetPrivateProfileSectionNamesA
FindNextFileA
FindFirstFileA
GetFileAttributesW
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
AreFileApisANSI
GetLastError
SetFilePointer
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
LockFileEx
UnlockFileEx
GetFileAttributesA
CloseHandle
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetDriveTypeA
GetSystemTimeAsFileTime
UnmapViewOfFile
GetTempPathA
GetTempPathW
FormatMessageA
FormatMessageW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileW
GetSystemInfo
MapViewOfFile
CreateFileMappingA
GetComputerNameA
IsWow64Process
GetCurrentProcess
GlobalMemoryStatus
GetModuleHandleA
GetUserDefaultLocaleName
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation
GetLocaleInfoA
GetFileInformationByHandle
SystemTimeToFileTime
GetLocalTime
CompareStringW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
GetStringTypeW
GetModuleFileNameA
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentProcessId
Sleep
DeleteFileA
ExitProcess
GetFileAttributesExW
GetLogicalDriveStringsA
HeapAlloc
CreateDirectoryW
CopyFileW
lstrcpyW
lstrcatW
FindFirstFileW
lstrcmpW
DeleteFileW
FindNextFileW
FindClose
HeapFree
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetConsoleMode
GetConsoleCP
GetModuleFileNameW
LocalFree
GetProcessHeap
GetSystemTime
HeapCreate
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
HeapSize
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapReAlloc
RtlUnwind
RaiseException
DecodePointer
EncodePointer
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
WriteConsoleW
user32
GetSystemMetrics
wsprintfA
EnumDisplayDevicesW
CharToOemA
GetDC
ReleaseDC
GetKeyboardLayoutList
GetDesktopWindow
gdi32
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
CreateDCA
GetDeviceCaps
CreateCompatibleDC
advapi32
RegEnumValueA
RegQueryValueExA
RegEnumKeyExA
GetUserNameA
GetCurrentHwProfileA
RegOpenKeyExW
RegGetValueW
RegCloseKey
RegGetValueA
RegOpenKeyExA
shell32
SHGetFolderPathA
ShellExecuteA
ole32
CoCreateInstance
CoUninitialize
shlwapi
PathMatchSpecW
crypt32
CryptStringToBinaryA
CryptUnprotectData
psapi
GetModuleFileNameExA
EnumProcessModules
GetModuleBaseNameA
wininet
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetSetFilePointer
InternetReadFile
HttpQueryInfoA
HttpAddRequestHeadersA
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
gdiplus
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipGetImageEncodersSize
GdipFree
bcrypt
BCryptDecrypt
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptGenerateSymmetricKey
BCryptSetProperty
BCryptOpenAlgorithmProvider
Sections
.text Size: 451KB - Virtual size: 451KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE